@alneas/eaos-server 0.0.0-stage → 0.1.0

package/dist/execution/index.js

@@ -0,0 +1,57 @@
+// src/execution/index.ts
+import { Hono } from "hono";
+function createPluginExecutionRouter(options) {
+  const router = new Hono(), operations = { ...options.operations }, maxBytes = options.maxBodyBytes ?? 1048576;
+  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) throw new Error("Invalid request limit");
+  router.post("/:pluginId/:action", async (c) => {
+    c.header("Cache-Control", "no-store");
+    try {
+      if (c.req.header("Content-Type")?.split(";")[0].trim().toLowerCase() !== "application/json") return c.json({ error: "JSON required" }, 415);
+      const origin = c.req.header("Origin");
+      if (origin && !options.allowedOrigins?.includes(origin)) return c.json({ error: "Origin denied" }, 403);
+      const identity = await options.resolveIdentity(c);
+      if (!identity?.tenantId?.trim() || !identity.userId?.trim()) return c.json({ error: "Authentication required" }, 401);
+      const { pluginId, action } = c.req.param();
+      if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(pluginId) || !/^[a-zA-Z0-9_-]+$/.test(action) || !Object.hasOwn(operations, `${pluginId}:${action}`)) return c.json({ error: "Unknown operation" }, 404);
+      const reader = c.req.raw.body?.getReader();
+      const chunks = [];
+      let size = 0;
+      if (reader) try {
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          size += value.length;
+          if (size > maxBytes) {
+            await reader.cancel();
+            return c.json({ error: "Request too large" }, 413);
+          }
+          ;
+          chunks.push(value);
+        }
+      } finally {
+        reader.releaseLock();
+      }
+      const bytes = new Uint8Array(size);
+      let offset = 0;
+      for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.length;
+      }
+      let payload;
+      try {
+        payload = JSON.parse(new TextDecoder().decode(bytes));
+      } catch {
+        return c.json({ error: "Invalid JSON" }, 400);
+      }
+      if (!await options.authorize(identity, pluginId, action, payload)) return c.json({ error: "Execution denied" }, 403);
+      return c.json(await operations[`${pluginId}:${action}`](identity, payload));
+    } catch {
+      return c.json({ error: "Execution unavailable" }, 503);
+    }
+  });
+  return router;
+}
+export {
+  createPluginExecutionRouter
+};
+//# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/execution/index.ts"],"sourcesContent":["import { Hono, type Context } from 'hono'\n/**\n * Authenticated host identity supplied to {@link createPluginExecutionRouter}.\n */\nexport interface ExecutionIdentity {\n /** Nonblank verified tenant ID. */\n tenantId: string\n /** Nonblank verified user ID. */\n userId: string\n}\n/**\n * Routes authenticated, authorized JSON requests to a fixed plugin/action operation map.\n * @param options - resolveIdentity receives Hono context and resolves verified identity/null; authorize receives that identity, pluginId, action, and parsed payload and must check current membership, activation, and resource permissions; operations maps pluginId:action to async handlers receiving identity/payload. maxBodyBytes defaults to 1048576; allowedOrigins permits exact Origin values and defaults to none.\n * @returns A router serving POST /:pluginId/:action with no-store responses. It returns handler output as JSON or explicit 400/401/403/404/413/415 failures; callback/transport/serialization failures become 503.\n * @throws Synchronously for a nonpositive or unsafe-integer body limit.\n * @remarks The operation map is shallow-copied at creation. Plugin IDs must be lowercase kebab-case; actions allow letters/digits/underscore/hyphen. Origin is checked only when present and is not authentication. Body readers are released and oversized streams cancelled. No transaction, idempotency, cancellation, or retry is supplied; operation side effects may precede a 503 response.\n * @example\n * ```typescript\n * import { createPluginExecutionRouter } from \"@alneas/eaos-server/execution\";\n * export function executionRouter(options: Parameters<typeof createPluginExecutionRouter>[0]) {\n *   // Host adapters authenticate, authorize, validate payloads, and persist operation results.\n *   return createPluginExecutionRouter(options);\n * }\n * ```\n */\nexport function createPluginExecutionRouter(options: {\n  /**\n   * Authenticates the Hono request and resolves nonblank verified tenant/user IDs or null; callback failure becomes a 503 response.\n   */\n  resolveIdentity: (context: Context) => Promise<ExecutionIdentity | null>\n  /** Must check current tenant membership, plugin activation and resource permissions. */\n  authorize: (identity: ExecutionIdentity, pluginId: string, action: string, payload: unknown) => Promise<boolean>\n  /**\n   * Fixed pluginId:action handlers shallow-copied at creation; each receives admitted identity and parsed JSON and resolves JSON-serializable output.\n   */\n  operations: Record<string, (identity: ExecutionIdentity, payload: unknown) => Promise<unknown>>\n  /**\n   * Positive safe-integer request body limit in bytes, enforced while reading; defaults to 1048576.\n   */\n  maxBodyBytes?: number\n  /**\n   * Optional exact Origin allowlist; any present Origin is denied unless included, while an absent Origin skips this check.\n   */\n  allowedOrigins?: string[]\n}) {\n  const router = new Hono(), operations = { ...options.operations }, maxBytes = options.maxBodyBytes ?? 1_048_576\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) throw new Error('Invalid request limit')\n  router.post('/:pluginId/:action', async c => {\n    c.header('Cache-Control', 'no-store')\n    try {\n      if (c.req.header('Content-Type')?.split(';')[0].trim().toLowerCase() !== 'application/json') return c.json({ error: 'JSON required' }, 415)\n      const origin = c.req.header('Origin')\n      if (origin && !options.allowedOrigins?.includes(origin)) return c.json({ error: 'Origin denied' }, 403)\n      const identity = await options.resolveIdentity(c)\n      if (!identity?.tenantId?.trim() || !identity.userId?.trim()) return c.json({ error: 'Authentication required' }, 401)\n      const { pluginId, action } = c.req.param()\n      if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(pluginId) || !/^[a-zA-Z0-9_-]+$/.test(action) || !Object.hasOwn(operations, `${pluginId}:${action}`)) return c.json({ error: 'Unknown operation' }, 404)\n      const reader = c.req.raw.body?.getReader(); const chunks: Uint8Array[] = []; let size = 0\n      if (reader) try {\n        while (true) { const { done, value } = await reader.read(); if (done) break; size += value.length; if (size > maxBytes) { await reader.cancel(); return c.json({ error: 'Request too large' }, 413) }; chunks.push(value) }\n      } finally { reader.releaseLock() }\n      const bytes = new Uint8Array(size); let offset = 0\n      for (const chunk of chunks) { bytes.set(chunk, offset); offset += chunk.length }\n      let payload: unknown\n      try { payload = JSON.parse(new TextDecoder().decode(bytes)) } catch { return c.json({ error: 'Invalid JSON' }, 400) }\n      if (!await options.authorize(identity, pluginId, action, payload)) return c.json({ error: 'Execution denied' }, 403)\n      return c.json(await operations[`${pluginId}:${action}`](identity, payload))\n    } catch { return c.json({ error: 'Execution unavailable' }, 503) }\n  })\n  return router\n}\n"],"mappings":";AAAA,SAAS,YAA0B;AAyB5B,SAAS,4BAA4B,SAmBzC;AACD,QAAM,SAAS,IAAI,KAAK,GAAG,aAAa,EAAE,GAAG,QAAQ,WAAW,GAAG,WAAW,QAAQ,gBAAgB;AACtG,MAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,EAAG,OAAM,IAAI,MAAM,uBAAuB;AAC5F,SAAO,KAAK,sBAAsB,OAAM,MAAK;AAC3C,MAAE,OAAO,iBAAiB,UAAU;AACpC,QAAI;AACF,UAAI,EAAE,IAAI,OAAO,cAAc,GAAG,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,MAAM,mBAAoB,QAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;AAC1I,YAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;AACpC,UAAI,UAAU,CAAC,QAAQ,gBAAgB,SAAS,MAAM,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;AACtG,YAAM,WAAW,MAAM,QAAQ,gBAAgB,CAAC;AAChD,UAAI,CAAC,UAAU,UAAU,KAAK,KAAK,CAAC,SAAS,QAAQ,KAAK,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;AACpH,YAAM,EAAE,UAAU,OAAO,IAAI,EAAE,IAAI,MAAM;AACzC,UAAI,CAAC,6BAA6B,KAAK,QAAQ,KAAK,CAAC,mBAAmB,KAAK,MAAM,KAAK,CAAC,OAAO,OAAO,YAAY,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;AAC9L,YAAM,SAAS,EAAE,IAAI,IAAI,MAAM,UAAU;AAAG,YAAM,SAAuB,CAAC;AAAG,UAAI,OAAO;AACxF,UAAI,OAAQ,KAAI;AACd,eAAO,MAAM;AAAE,gBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAAG,cAAI,KAAM;AAAO,kBAAQ,MAAM;AAAQ,cAAI,OAAO,UAAU;AAAE,kBAAM,OAAO,OAAO;AAAG,mBAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;AAAA,UAAE;AAAC;AAAE,iBAAO,KAAK,KAAK;AAAA,QAAE;AAAA,MAC5N,UAAE;AAAU,eAAO,YAAY;AAAA,MAAE;AACjC,YAAM,QAAQ,IAAI,WAAW,IAAI;AAAG,UAAI,SAAS;AACjD,iBAAW,SAAS,QAAQ;AAAE,cAAM,IAAI,OAAO,MAAM;AAAG,kBAAU,MAAM;AAAA,MAAO;AAC/E,UAAI;AACJ,UAAI;AAAE,kBAAU,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AAAA,MAAE,QAAQ;AAAE,eAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;AAAA,MAAE;AACpH,UAAI,CAAC,MAAM,QAAQ,UAAU,UAAU,UAAU,QAAQ,OAAO,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;AACnH,aAAO,EAAE,KAAK,MAAM,WAAW,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAE,UAAU,OAAO,CAAC;AAAA,IAC5E,QAAQ;AAAE,aAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;AAAA,IAAE;AAAA,EACnE,CAAC;AACD,SAAO;AACT;","names":[]}

package/dist/extensions/index.d.ts

@@ -0,0 +1,172 @@
+import { Hono, Context, MiddlewareHandler } from 'hono';
+import { PluginManifest } from '@alneas/eaos-core';
+import { PlatformContribution } from '@alneas/eaos-server/platform';
+
+/**
+ * Plugin-manifest route factory supplied by trusted deployment composition.
+ * @see PlatformExtension.
+ */
+type HostRouteFactory = NonNullable<PluginManifest['createRoutes']>;
+/**
+ * Adds host route composition to a trusted platform contribution with explicit tenant scope.
+ * @remarks Never populate this object from request input.
+ * @see validateExtensions for a complete composition example.
+ */
+interface PlatformExtension extends PlatformContribution {
+    /** Plugin-ID factories for every contributed manifest; may not override plugins absent from this contribution. */
+    routeFactories?: Record<string, HostRouteFactory>;
+    /** Optional host API routes with an absolute, wildcard-free prefix, nonblank moduleId, and Hono router. */
+    routes?: Array<{
+        /** Absolute wildcard-free mount prefix; overlapping tenant contributions may not claim the same prefix. */
+        prefix: string;
+        /** Nonblank module identity passed to the host requireModule factory after the extension tenant-scope check. */
+        moduleId: string;
+        /** Trusted Hono child router wrapped with tenant-scope and live host module middleware during extension composition. */
+        router: Hono;
+    }>;
+    /** Optional request context resolver; contributions using it may not overlap tenant scope. Its result/authorization semantics belong to the host. */
+    userContext?: (context: Context) => Promise<unknown>;
+}
+/**
+ * Checks trusted extension shapes, IDs, route factories, and conflicting tenant/user-context contributions.
+ * @param values - Deployment module values to validate; request input must not supply implementations.
+ * @returns A new array containing the original validated objects; no deep clone or sandboxing occurs.
+ * @throws For invalid version/ID/explicit tenant scopes, duplicate extension/plugin IDs, overlapping userContext tenant scopes, invalid routes, or missing/unauthorized route factories.
+ * @remarks Independent plugins can share tenants. This validates composition constraints, not manifest internals or implementation safety.
+ * @example
+ * ```typescript
+ * import { validateExtensions } from "@alneas/eaos-server/extensions";
+ * const extensions = validateExtensions([{ apiVersion: 1, id: "example", tenantIds: ["example"] }]);
+ * console.log(extensions.length); // 1
+ * ```
+ */
+declare function validateExtensions(values: unknown[]): PlatformExtension[];
+/**
+ * Wraps each contributed plugin route factory with an explicit tenant-scope middleware.
+ * @param item - Trusted validated extension; tenantIds is consulted at request time.
+ * @returns A shallow copy with fresh route factory wrappers; each wrapper invokes the original factory with unchanged arguments.
+ * @throws Calling a wrapped factory propagates the original route-factory errors.
+ * @remarks Set trusted tenantId context before handling requests. Out-of-scope or missing tenantId returns 403. This wrapper performs no membership or module authorization.
+ * @example
+ * ```typescript
+ * import { scopeExtensionFactories, validateExtensions } from "@alneas/eaos-server/extensions";
+ * const [extension] = validateExtensions([{ apiVersion: 1, id: "example", tenantIds: ["example"] }]);
+ * const scoped = scopeExtensionFactories(extension);
+ * console.log(scoped.id);
+ * ```
+ */
+declare function scopeExtensionFactories(item: PlatformExtension): PlatformExtension;
+/**
+ * Wraps contributed host routers with tenant-scope checks followed by host module authorization.
+ * @param extension - Trusted validated contribution; omitted routes produce an empty array.
+ * @param requireModule - Called once per route with moduleId during composition; returns middleware enforcing current module permissions.
+ * @returns New prefix/router pairs preserving original route order and mounting original routers beneath their guards.
+ * @throws Propagates module middleware factory or route composition errors; request execution propagates downstream failures.
+ * @remarks Requires a verified tenantId in Hono context. No authentication is installed here.
+ * @example
+ * ```typescript
+ * import { scopeExtensionRoutes, validateExtensions } from "@alneas/eaos-server/extensions";
+ * import { createModuleGuard } from "@alneas/eaos-server/middleware/module-guard";
+ * const [extension] = validateExtensions([{ apiVersion: 1, id: "example", tenantIds: ["example"] }]);
+ * console.log(scopeExtensionRoutes(extension, id => createModuleGuard(id, { isDev: false }))); // []
+ * ```
+ */
+declare function scopeExtensionRoutes(extension: PlatformExtension, requireModule: (moduleId: string) => MiddlewareHandler): Array<{
+    /**
+   * Original host route prefix preserved for subsequent mounting.
+   */
+    prefix: string;
+    /**
+   * Fresh Hono wrapper enforcing tenant scope and host module authorization before forwarding to the original router.
+   */
+    router: Hono;
+}>;
+/**
+ * Mounts tenant-dispatched extension routes, allowing a shared prefix across disjoint tenant scopes.
+ * @param app - Host Hono app mutated with exact-prefix and descendant dispatch routes.
+ * @param extensions - Trusted validated extensions with explicit tenant IDs.
+ * @param requireModule - Host factory producing current module authorization middleware for each route moduleId.
+ * @returns No value; completes after mounting all route groups.
+ * @throws For an overlapping tenant at the same prefix, or propagated route/middleware composition errors.
+ * @remarks Install verified identity/tenant middleware before these routes. Dispatch copies parent context variables into the selected child and forwards server environment; missing tenant scope returns 403. There is no automatic route unmount or per-request persistence.
+ * @example
+ * ```typescript
+ * import { Hono } from "hono";
+ * import { mountExtensionRoutes, type PlatformExtension } from "@alneas/eaos-server/extensions";
+ * import { createModuleGuard } from "@alneas/eaos-server/middleware/module-guard";
+ * export function mount(app: Hono, extensions: PlatformExtension[]) {
+ *   mountExtensionRoutes(app, extensions, id => createModuleGuard(id, { isDev: false }));
+ * }
+ * ```
+ */
+declare function mountExtensionRoutes(app: Hono, extensions: PlatformExtension[], requireModule: (id: string) => MiddlewareHandler): void;
+/** Request-scoped host authorization supplied after verified membership middleware.
+ * @see getPlatformPluginAuthorization for binding lookup and a usage example.
+ */
+interface PlatformPluginAuthorization {
+    /**
+     * Resolves the current verified principal after host authentication/membership checks.
+     * @returns Tenant/user identity, verified roles, and current enabled plugin IDs, or null to deny.
+     * @throws Host authentication or persistence failures propagate to callers.
+     
+     * @example
+     * ```typescript
+     * import type { PlatformPluginAuthorization } from "@alneas/eaos-server/extensions";
+     * export async function readHostPrincipal(authorization: PlatformPluginAuthorization) {
+     *   const principal = await authorization.resolvePrincipal();
+     *   return principal; // Null denies access; never replace it with request-supplied claims.
+     * }
+     * ```
+     */
+    resolvePrincipal(): Promise<{
+        /** Tenant identity established by trusted host authentication/membership resolution; request-supplied headers/body must not define this claim. */
+        tenantId: string;
+        /** Authenticated user identity within the resolved tenant scope. */
+        userId: string;
+        /** Verified host role claims used for downstream authorization; tenant roles must not fabricate platform authority. */
+        roles: string[];
+        /** Current plugin activation identities visible to this verified principal; the host supplies live lifecycle data. */
+        enabledPluginIds: string[];
+    } | null>;
+    /**
+     * Checks live plugin activation for a verified tenant.
+     * @param tenantId - Verified tenant ID.
+     * @param pluginId - Exact installed plugin ID.
+     * @returns True only when the plugin is currently enabled for this tenant.
+     * @throws Host lifecycle/persistence failures propagate to callers.
+     
+     * @example
+     * ```typescript
+     * import type { PlatformPluginAuthorization } from "@alneas/eaos-server/extensions";
+     * export async function checkCurrentPlugin(
+     *   authorization: PlatformPluginAuthorization, verifiedTenantId: string, installedPluginId: string,
+     * ) {
+     *   return await authorization.isPluginEnabled(verifiedTenantId, installedPluginId);
+     * }
+     * ```
+     */
+    isPluginEnabled(tenantId: string, pluginId: string): Promise<boolean>;
+}
+/**
+ * Hono variable/environment key for the host-only {@link PlatformPluginAuthorization} binding.
+ * @see getPlatformPluginAuthorization for access behavior.
+ */
+declare const PLATFORM_PLUGIN_AUTHORIZATION = "eaosPlatformPluginAuthorization";
+/**
+ * Reads a structurally valid host authorization port from Hono context or server environment.
+ * @param context - Hono-like context; get(bindingKey) takes precedence over env[bindingKey] when nonnull. Missing contexts return undefined.
+ * @returns The original port when both required members are functions, or undefined otherwise.
+ * @throws Propagates errors thrown by the context get accessor.
+ * @remarks Hono environment forwarding is internal-only; HTTP headers never supply this binding. Structural validation does not establish trust: only host middleware may install it.
+ * @example
+ * ```typescript
+ * import { Hono } from "hono";
+ * import { getPlatformPluginAuthorization } from "@alneas/eaos-server/extensions";
+ * const app = new Hono();
+ * app.get("/authorization-state", c => c.json({ configured: !!getPlatformPluginAuthorization(c) }));
+ * ```
+ */
+declare function getPlatformPluginAuthorization(context: unknown): PlatformPluginAuthorization | undefined;
+
+export { PLATFORM_PLUGIN_AUTHORIZATION, getPlatformPluginAuthorization, mountExtensionRoutes, scopeExtensionFactories, scopeExtensionRoutes, validateExtensions };
+export type { HostRouteFactory, PlatformExtension, PlatformPluginAuthorization };

package/dist/extensions/index.js

@@ -0,0 +1,95 @@
+// src/extensions/index.ts
+import { Hono } from "hono";
+function validateExtensions(values) {
+  const ids = /* @__PURE__ */ new Set();
+  const plugins = /* @__PURE__ */ new Set();
+  const tenants = /* @__PURE__ */ new Set();
+  return values.map((value) => {
+    const item = value;
+    if (!item || item.apiVersion !== 1 || typeof item.id !== "string" || !item.id.trim() || !Array.isArray(item.tenantIds) || !item.tenantIds.length || item.tenantIds.some((id) => typeof id !== "string" || !id.trim() || id !== id.trim() || id === "*") || item.manifests !== void 0 && !Array.isArray(item.manifests) || item.lifecycle !== void 0 && !Array.isArray(item.lifecycle) || item.routes !== void 0 && !Array.isArray(item.routes)) {
+      throw new Error("Invalid platform extension: version, id and explicit tenantIds are required");
+    }
+    if (ids.has(item.id)) throw new Error(`Duplicate extension: ${item.id}`);
+    ids.add(item.id);
+    for (const tenant of item.userContext ? item.tenantIds : []) {
+      if (tenants.has(tenant)) throw new Error(`Conflicting extension tenant: ${tenant}`);
+      tenants.add(tenant);
+    }
+    for (const route of item.routes ?? []) {
+      if (typeof route.prefix !== "string" || !route.prefix.startsWith("/") || route.prefix.includes("*") || typeof route.moduleId !== "string" || !route.moduleId.trim() || typeof route.router?.fetch !== "function") throw new Error("Invalid extension route");
+    }
+    for (const manifest of item.manifests ?? []) {
+      if (plugins.has(manifest.id)) throw new Error(`Duplicate extension plugin: ${manifest.id}`);
+      plugins.add(manifest.id);
+      if (typeof item.routeFactories?.[manifest.id] !== "function") throw new Error(`Extension route factory required: ${manifest.id}`);
+    }
+    for (const id of Object.keys(item.routeFactories ?? {})) {
+      if (!(item.manifests ?? []).some((manifest) => manifest.id === id)) throw new Error(`Extension cannot override an official route factory: ${id}`);
+    }
+    return item;
+  });
+}
+function scopeExtensionFactories(item) {
+  return { ...item, routeFactories: Object.fromEntries(Object.entries(item.routeFactories ?? {}).map(([id, factory]) => [id, (...args) => {
+    const router = new Hono();
+    router.use("*", async (context, next) => {
+      if (!item.tenantIds.includes(String(context.get("tenantId") ?? ""))) return context.json({ error: "Tenant unavailable" }, 403);
+      return next();
+    });
+    return router.route("/", factory(...args));
+  }])) };
+}
+function scopeExtensionRoutes(extension, requireModule) {
+  return (extension.routes ?? []).map((route) => {
+    const router = new Hono();
+    router.use("*", async (context, next) => {
+      if (!extension.tenantIds.includes(String(context.get("tenantId") ?? ""))) return context.json({ error: "Tenant unavailable" }, 403);
+      return next();
+    });
+    router.use("*", requireModule(route.moduleId));
+    router.route("/", route.router);
+    return { prefix: route.prefix, router };
+  });
+}
+function mountExtensionRoutes(app, extensions, requireModule) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const extension of extensions) for (const route of scopeExtensionRoutes(extension, requireModule)) {
+    const group = groups.get(route.prefix) ?? [];
+    if (group.some((item) => item.tenantIds.some((tenant) => extension.tenantIds.includes(tenant)))) throw new Error("Conflicting extension API prefix for tenant");
+    group.push({ tenantIds: extension.tenantIds, router: route.router });
+    groups.set(route.prefix, group);
+  }
+  for (const [prefix, candidates] of groups) {
+    const dispatch = async (context) => {
+      const tenantId = String(context.get("tenantId") ?? "");
+      const selected = candidates.find((item) => item.tenantIds.includes(tenantId));
+      if (!selected) return context.json({ error: "Tenant unavailable" }, 403);
+      const child = new Hono();
+      child.use("*", async (nested, next) => {
+        for (const [key, value] of Object.entries(context.var)) nested.set(key, value);
+        return next();
+      });
+      child.route(prefix, selected.router);
+      return child.fetch(context.req.raw, context.env);
+    };
+    app.all(prefix, dispatch);
+    app.all(prefix.replace(/\/$/, "") + "/*", dispatch);
+  }
+}
+var PLATFORM_PLUGIN_AUTHORIZATION = "eaosPlatformPluginAuthorization";
+function getPlatformPluginAuthorization(context) {
+  const c = context;
+  const binding = c?.get?.(PLATFORM_PLUGIN_AUTHORIZATION) ?? c?.env?.[PLATFORM_PLUGIN_AUTHORIZATION];
+  if (!binding || typeof binding !== "object") return void 0;
+  const port = binding;
+  return typeof port.resolvePrincipal === "function" && typeof port.isPluginEnabled === "function" ? port : void 0;
+}
+export {
+  PLATFORM_PLUGIN_AUTHORIZATION,
+  getPlatformPluginAuthorization,
+  mountExtensionRoutes,
+  scopeExtensionFactories,
+  scopeExtensionRoutes,
+  validateExtensions
+};
+//# sourceMappingURL=index.js.map

package/dist/extensions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/extensions/index.ts"],"sourcesContent":["import { Hono, type Context, type MiddlewareHandler } from 'hono'\nimport type { PluginManifest } from '@alneas/eaos-core'\nimport type { PlatformContribution } from '@alneas/eaos-server/platform'\n/**\n * Plugin-manifest route factory supplied by trusted deployment composition.\n * @see PlatformExtension.\n */\nexport type HostRouteFactory = NonNullable<PluginManifest['createRoutes']>\n\n/**\n * Adds host route composition to a trusted platform contribution with explicit tenant scope.\n * @remarks Never populate this object from request input.\n * @see validateExtensions for a complete composition example.\n */\nexport interface PlatformExtension extends PlatformContribution {\n  /** Plugin-ID factories for every contributed manifest; may not override plugins absent from this contribution. */\n  routeFactories?: Record<string, HostRouteFactory>\n  /** Optional host API routes with an absolute, wildcard-free prefix, nonblank moduleId, and Hono router. */\n  routes?: Array<{\n    /** Absolute wildcard-free mount prefix; overlapping tenant contributions may not claim the same prefix. */\n    prefix: string\n    /** Nonblank module identity passed to the host requireModule factory after the extension tenant-scope check. */\n    moduleId: string\n    /** Trusted Hono child router wrapped with tenant-scope and live host module middleware during extension composition. */\n    router: Hono\n  }>\n  /** Optional request context resolver; contributions using it may not overlap tenant scope. Its result/authorization semantics belong to the host. */\n  userContext?: (context: Context) => Promise<unknown>\n}\n\n/**\n * Checks trusted extension shapes, IDs, route factories, and conflicting tenant/user-context contributions.\n * @param values - Deployment module values to validate; request input must not supply implementations.\n * @returns A new array containing the original validated objects; no deep clone or sandboxing occurs.\n * @throws For invalid version/ID/explicit tenant scopes, duplicate extension/plugin IDs, overlapping userContext tenant scopes, invalid routes, or missing/unauthorized route factories.\n * @remarks Independent plugins can share tenants. This validates composition constraints, not manifest internals or implementation safety.\n * @example\n * ```typescript\n * import { validateExtensions } from \"@alneas/eaos-server/extensions\";\n * const extensions = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * console.log(extensions.length); // 1\n * ```\n */\nexport function validateExtensions(values: unknown[]): PlatformExtension[] {\n  const ids = new Set<string>()\n  const plugins = new Set<string>()\n  const tenants = new Set<string>()\n  return values.map(value => {\n    const item = value as PlatformExtension\n    if (!item || item.apiVersion !== 1 || typeof item.id !== 'string' || !item.id.trim()\n      || !Array.isArray(item.tenantIds) || !item.tenantIds.length\n      || item.tenantIds.some(id => typeof id !== 'string' || !id.trim() || id !== id.trim() || id === '*')\n      || (item.manifests !== undefined && !Array.isArray(item.manifests))\n      || (item.lifecycle !== undefined && !Array.isArray(item.lifecycle))\n      || (item.routes !== undefined && !Array.isArray(item.routes))) {\n      throw new Error('Invalid platform extension: version, id and explicit tenantIds are required')\n    }\n    if (ids.has(item.id)) throw new Error(`Duplicate extension: ${item.id}`)\n    ids.add(item.id)\n    // Product identity overrides must remain unambiguous; independent plugins may share tenants.\n    for (const tenant of item.userContext ? item.tenantIds : []) {\n      if (tenants.has(tenant)) throw new Error(`Conflicting extension tenant: ${tenant}`)\n      tenants.add(tenant)\n    }\n    for (const route of item.routes ?? []) {\n      if (typeof route.prefix !== 'string' || !route.prefix.startsWith('/') || route.prefix.includes('*') || typeof route.moduleId !== 'string' || !route.moduleId.trim() || typeof route.router?.fetch !== 'function') throw new Error('Invalid extension route')\n    }\n    for (const manifest of item.manifests ?? []) {\n      if (plugins.has(manifest.id)) throw new Error(`Duplicate extension plugin: ${manifest.id}`)\n      plugins.add(manifest.id)\n      if (typeof item.routeFactories?.[manifest.id] !== 'function') throw new Error(`Extension route factory required: ${manifest.id}`)\n    }\n    for (const id of Object.keys(item.routeFactories ?? {})) {\n      if (!(item.manifests ?? []).some(manifest => manifest.id === id)) throw new Error(`Extension cannot override an official route factory: ${id}`)\n    }\n    return item\n  })\n}\n\n/**\n * Wraps each contributed plugin route factory with an explicit tenant-scope middleware.\n * @param item - Trusted validated extension; tenantIds is consulted at request time.\n * @returns A shallow copy with fresh route factory wrappers; each wrapper invokes the original factory with unchanged arguments.\n * @throws Calling a wrapped factory propagates the original route-factory errors.\n * @remarks Set trusted tenantId context before handling requests. Out-of-scope or missing tenantId returns 403. This wrapper performs no membership or module authorization.\n * @example\n * ```typescript\n * import { scopeExtensionFactories, validateExtensions } from \"@alneas/eaos-server/extensions\";\n * const [extension] = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * const scoped = scopeExtensionFactories(extension);\n * console.log(scoped.id);\n * ```\n */\nexport function scopeExtensionFactories(item: PlatformExtension): PlatformExtension {\n  return { ...item, routeFactories: Object.fromEntries(Object.entries(item.routeFactories ?? {}).map(([id, factory]) => [id, (...args: Parameters<HostRouteFactory>) => {\n    const router = new Hono()\n    router.use('*', async (context: Context, next) => {\n      if (!item.tenantIds.includes(String(context.get('tenantId') ?? ''))) return context.json({ error: 'Tenant unavailable' }, 403)\n      return next()\n    })\n    return router.route('/', factory(...args))\n  }])) }\n}\n\n/**\n * Wraps contributed host routers with tenant-scope checks followed by host module authorization.\n * @param extension - Trusted validated contribution; omitted routes produce an empty array.\n * @param requireModule - Called once per route with moduleId during composition; returns middleware enforcing current module permissions.\n * @returns New prefix/router pairs preserving original route order and mounting original routers beneath their guards.\n * @throws Propagates module middleware factory or route composition errors; request execution propagates downstream failures.\n * @remarks Requires a verified tenantId in Hono context. No authentication is installed here.\n * @example\n * ```typescript\n * import { scopeExtensionRoutes, validateExtensions } from \"@alneas/eaos-server/extensions\";\n * import { createModuleGuard } from \"@alneas/eaos-server/middleware/module-guard\";\n * const [extension] = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * console.log(scopeExtensionRoutes(extension, id => createModuleGuard(id, { isDev: false }))); // []\n * ```\n */\nexport function scopeExtensionRoutes(\n  extension: PlatformExtension,\n  requireModule: (moduleId: string) => MiddlewareHandler,\n): Array<{\n  /**\n * Original host route prefix preserved for subsequent mounting.\n */\nprefix: string;\n  /**\n * Fresh Hono wrapper enforcing tenant scope and host module authorization before forwarding to the original router.\n */\nrouter: Hono }> {\n  return (extension.routes ?? []).map(route => {\n    const router = new Hono()\n    router.use('*', async (context: Context, next) => {\n      if (!extension.tenantIds.includes(String(context.get('tenantId') ?? ''))) return context.json({ error: 'Tenant unavailable' }, 403)\n      return next()\n    })\n    router.use('*', requireModule(route.moduleId))\n    router.route('/', route.router)\n    return { prefix: route.prefix, router }\n  })\n}\n\n\n/**\n * Mounts tenant-dispatched extension routes, allowing a shared prefix across disjoint tenant scopes.\n * @param app - Host Hono app mutated with exact-prefix and descendant dispatch routes.\n * @param extensions - Trusted validated extensions with explicit tenant IDs.\n * @param requireModule - Host factory producing current module authorization middleware for each route moduleId.\n * @returns No value; completes after mounting all route groups.\n * @throws For an overlapping tenant at the same prefix, or propagated route/middleware composition errors.\n * @remarks Install verified identity/tenant middleware before these routes. Dispatch copies parent context variables into the selected child and forwards server environment; missing tenant scope returns 403. There is no automatic route unmount or per-request persistence.\n * @example\n * ```typescript\n * import { Hono } from \"hono\";\n * import { mountExtensionRoutes, type PlatformExtension } from \"@alneas/eaos-server/extensions\";\n * import { createModuleGuard } from \"@alneas/eaos-server/middleware/module-guard\";\n * export function mount(app: Hono, extensions: PlatformExtension[]) {\n *   mountExtensionRoutes(app, extensions, id => createModuleGuard(id, { isDev: false }));\n * }\n * ```\n */\nexport function mountExtensionRoutes(app: Hono, extensions: PlatformExtension[], requireModule: (id: string) => MiddlewareHandler): void {\n  const groups = new Map<string, Array<{ tenantIds: string[]; router: Hono }>>()\n  for (const extension of extensions) for (const route of scopeExtensionRoutes(extension, requireModule)) {\n    const group = groups.get(route.prefix) ?? []\n    if (group.some(item => item.tenantIds.some(tenant => extension.tenantIds.includes(tenant)))) throw new Error('Conflicting extension API prefix for tenant')\n    group.push({ tenantIds: extension.tenantIds, router: route.router })\n    groups.set(route.prefix, group)\n  }\n  for (const [prefix, candidates] of groups) {\n    const dispatch: MiddlewareHandler = async context => {\n      const tenantId = String(context.get('tenantId') ?? '')\n      const selected = candidates.find(item => item.tenantIds.includes(tenantId))\n      if (!selected) return context.json({ error: 'Tenant unavailable' }, 403)\n      const child = new Hono<{ Variables: Record<string, unknown> }>()\n      child.use('*', async (nested, next) => {\n        // Preserve verified parent state without putting it in client-controlled headers/body.\n        for (const [key, value] of Object.entries(context.var)) nested.set(key, value)\n        return next()\n      })\n      child.route(prefix, selected.router)\n      return child.fetch(context.req.raw, context.env)\n    }\n    app.all(prefix, dispatch)\n    app.all(prefix.replace(/\\/$/, '') + '/*', dispatch)\n  }\n}\n\n/** Request-scoped host authorization supplied after verified membership middleware.\n * @see getPlatformPluginAuthorization for binding lookup and a usage example.\n */\nexport interface PlatformPluginAuthorization {\n  /**\n   * Resolves the current verified principal after host authentication/membership checks.\n   * @returns Tenant/user identity, verified roles, and current enabled plugin IDs, or null to deny.\n   * @throws Host authentication or persistence failures propagate to callers.\n   \n   * @example\n   * ```typescript\n   * import type { PlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n   * export async function readHostPrincipal(authorization: PlatformPluginAuthorization) {\n   *   const principal = await authorization.resolvePrincipal();\n   *   return principal; // Null denies access; never replace it with request-supplied claims.\n   * }\n   * ```\n   */\n  resolvePrincipal(): Promise<{ \n  /** Tenant identity established by trusted host authentication/membership resolution; request-supplied headers/body must not define this claim. */\n  tenantId: string; \n  /** Authenticated user identity within the resolved tenant scope. */\n  userId: string; \n  /** Verified host role claims used for downstream authorization; tenant roles must not fabricate platform authority. */\n  roles: string[]; \n  /** Current plugin activation identities visible to this verified principal; the host supplies live lifecycle data. */\n  enabledPluginIds: string[] } | null>\n  /**\n   * Checks live plugin activation for a verified tenant.\n   * @param tenantId - Verified tenant ID.\n   * @param pluginId - Exact installed plugin ID.\n   * @returns True only when the plugin is currently enabled for this tenant.\n   * @throws Host lifecycle/persistence failures propagate to callers.\n   \n   * @example\n   * ```typescript\n   * import type { PlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n   * export async function checkCurrentPlugin(\n   *   authorization: PlatformPluginAuthorization, verifiedTenantId: string, installedPluginId: string,\n   * ) {\n   *   return await authorization.isPluginEnabled(verifiedTenantId, installedPluginId);\n   * }\n   * ```\n   */\n  isPluginEnabled(tenantId: string, pluginId: string): Promise<boolean>\n}\n/**\n * Hono variable/environment key for the host-only {@link PlatformPluginAuthorization} binding.\n * @see getPlatformPluginAuthorization for access behavior.\n */\nexport const PLATFORM_PLUGIN_AUTHORIZATION = 'eaosPlatformPluginAuthorization'\n\n/**\n * Reads a structurally valid host authorization port from Hono context or server environment.\n * @param context - Hono-like context; get(bindingKey) takes precedence over env[bindingKey] when nonnull. Missing contexts return undefined.\n * @returns The original port when both required members are functions, or undefined otherwise.\n * @throws Propagates errors thrown by the context get accessor.\n * @remarks Hono environment forwarding is internal-only; HTTP headers never supply this binding. Structural validation does not establish trust: only host middleware may install it.\n * @example\n * ```typescript\n * import { Hono } from \"hono\";\n * import { getPlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n * const app = new Hono();\n * app.get(\"/authorization-state\", c => c.json({ configured: !!getPlatformPluginAuthorization(c) }));\n * ```\n */\nexport function getPlatformPluginAuthorization(context: unknown): PlatformPluginAuthorization | undefined {\n  const c = context as { get?: (key: string) => unknown; env?: Record<string, unknown> } | undefined\n  const binding = c?.get?.(PLATFORM_PLUGIN_AUTHORIZATION) ?? c?.env?.[PLATFORM_PLUGIN_AUTHORIZATION]\n  if (!binding || typeof binding !== 'object') return undefined\n  const port = binding as PlatformPluginAuthorization\n  return typeof port.resolvePrincipal === 'function' && typeof port.isPluginEnabled === 'function' ? port : undefined\n}\n"],"mappings":";AAAA,SAAS,YAAkD;AA2CpD,SAAS,mBAAmB,QAAwC;AACzE,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,UAAU,oBAAI,IAAY;AAChC,SAAO,OAAO,IAAI,WAAS;AACzB,UAAM,OAAO;AACb,QAAI,CAAC,QAAQ,KAAK,eAAe,KAAK,OAAO,KAAK,OAAO,YAAY,CAAC,KAAK,GAAG,KAAK,KAC9E,CAAC,MAAM,QAAQ,KAAK,SAAS,KAAK,CAAC,KAAK,UAAU,UAClD,KAAK,UAAU,KAAK,QAAM,OAAO,OAAO,YAAY,CAAC,GAAG,KAAK,KAAK,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,KAC/F,KAAK,cAAc,UAAa,CAAC,MAAM,QAAQ,KAAK,SAAS,KAC7D,KAAK,cAAc,UAAa,CAAC,MAAM,QAAQ,KAAK,SAAS,KAC7D,KAAK,WAAW,UAAa,CAAC,MAAM,QAAQ,KAAK,MAAM,GAAI;AAC/D,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AACA,QAAI,IAAI,IAAI,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,wBAAwB,KAAK,EAAE,EAAE;AACvE,QAAI,IAAI,KAAK,EAAE;AAEf,eAAW,UAAU,KAAK,cAAc,KAAK,YAAY,CAAC,GAAG;AAC3D,UAAI,QAAQ,IAAI,MAAM,EAAG,OAAM,IAAI,MAAM,iCAAiC,MAAM,EAAE;AAClF,cAAQ,IAAI,MAAM;AAAA,IACpB;AACA,eAAW,SAAS,KAAK,UAAU,CAAC,GAAG;AACrC,UAAI,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,OAAO,WAAW,GAAG,KAAK,MAAM,OAAO,SAAS,GAAG,KAAK,OAAO,MAAM,aAAa,YAAY,CAAC,MAAM,SAAS,KAAK,KAAK,OAAO,MAAM,QAAQ,UAAU,WAAY,OAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7P;AACA,eAAW,YAAY,KAAK,aAAa,CAAC,GAAG;AAC3C,UAAI,QAAQ,IAAI,SAAS,EAAE,EAAG,OAAM,IAAI,MAAM,+BAA+B,SAAS,EAAE,EAAE;AAC1F,cAAQ,IAAI,SAAS,EAAE;AACvB,UAAI,OAAO,KAAK,iBAAiB,SAAS,EAAE,MAAM,WAAY,OAAM,IAAI,MAAM,qCAAqC,SAAS,EAAE,EAAE;AAAA,IAClI;AACA,eAAW,MAAM,OAAO,KAAK,KAAK,kBAAkB,CAAC,CAAC,GAAG;AACvD,UAAI,EAAE,KAAK,aAAa,CAAC,GAAG,KAAK,cAAY,SAAS,OAAO,EAAE,EAAG,OAAM,IAAI,MAAM,wDAAwD,EAAE,EAAE;AAAA,IAChJ;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAgBO,SAAS,wBAAwB,MAA4C;AAClF,SAAO,EAAE,GAAG,MAAM,gBAAgB,OAAO,YAAY,OAAO,QAAQ,KAAK,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,IAAI,SAAuC;AACpK,UAAM,SAAS,IAAI,KAAK;AACxB,WAAO,IAAI,KAAK,OAAO,SAAkB,SAAS;AAChD,UAAI,CAAC,KAAK,UAAU,SAAS,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,EAAG,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AAC7H,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,OAAO,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC;AAAA,EAC3C,CAAC,CAAC,CAAC,EAAE;AACP;AAiBO,SAAS,qBACd,WACA,eASc;AACd,UAAQ,UAAU,UAAU,CAAC,GAAG,IAAI,WAAS;AAC3C,UAAM,SAAS,IAAI,KAAK;AACxB,WAAO,IAAI,KAAK,OAAO,SAAkB,SAAS;AAChD,UAAI,CAAC,UAAU,UAAU,SAAS,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,EAAG,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AAClI,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,IAAI,KAAK,cAAc,MAAM,QAAQ,CAAC;AAC7C,WAAO,MAAM,KAAK,MAAM,MAAM;AAC9B,WAAO,EAAE,QAAQ,MAAM,QAAQ,OAAO;AAAA,EACxC,CAAC;AACH;AAqBO,SAAS,qBAAqB,KAAW,YAAiC,eAAwD;AACvI,QAAM,SAAS,oBAAI,IAA0D;AAC7E,aAAW,aAAa,WAAY,YAAW,SAAS,qBAAqB,WAAW,aAAa,GAAG;AACtG,UAAM,QAAQ,OAAO,IAAI,MAAM,MAAM,KAAK,CAAC;AAC3C,QAAI,MAAM,KAAK,UAAQ,KAAK,UAAU,KAAK,YAAU,UAAU,UAAU,SAAS,MAAM,CAAC,CAAC,EAAG,OAAM,IAAI,MAAM,6CAA6C;AAC1J,UAAM,KAAK,EAAE,WAAW,UAAU,WAAW,QAAQ,MAAM,OAAO,CAAC;AACnE,WAAO,IAAI,MAAM,QAAQ,KAAK;AAAA,EAChC;AACA,aAAW,CAAC,QAAQ,UAAU,KAAK,QAAQ;AACzC,UAAM,WAA8B,OAAM,YAAW;AACnD,YAAM,WAAW,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE;AACrD,YAAM,WAAW,WAAW,KAAK,UAAQ,KAAK,UAAU,SAAS,QAAQ,CAAC;AAC1E,UAAI,CAAC,SAAU,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AACvE,YAAM,QAAQ,IAAI,KAA6C;AAC/D,YAAM,IAAI,KAAK,OAAO,QAAQ,SAAS;AAErC,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,EAAG,QAAO,IAAI,KAAK,KAAK;AAC7E,eAAO,KAAK;AAAA,MACd,CAAC;AACD,YAAM,MAAM,QAAQ,SAAS,MAAM;AACnC,aAAO,MAAM,MAAM,QAAQ,IAAI,KAAK,QAAQ,GAAG;AAAA,IACjD;AACA,QAAI,IAAI,QAAQ,QAAQ;AACxB,QAAI,IAAI,OAAO,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ;AAAA,EACpD;AACF;AAoDO,IAAM,gCAAgC;AAgBtC,SAAS,+BAA+B,SAA2D;AACxG,QAAM,IAAI;AACV,QAAM,UAAU,GAAG,MAAM,6BAA6B,KAAK,GAAG,MAAM,6BAA6B;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,OAAO;AACb,SAAO,OAAO,KAAK,qBAAqB,cAAc,OAAO,KAAK,oBAAoB,aAAa,OAAO;AAC5G;","names":[]}

package/dist/health/index.d.ts

@@ -0,0 +1,35 @@
+import { Hono } from 'hono';
+import { HealthCheck } from '@alneas/eaos-core';
+
+/**
+ * Host inputs for the unauthenticated liveness and readiness routes.
+ * @see createHealthRouter for a complete usage example.
+ */
+interface HealthRouterOptions {
+    /** Nonblank application label included in every response. */
+    appName: string;
+    /** Readiness checks run on each readiness request; defaults to no checks. */
+    checks?: readonly HealthCheck[];
+    /** Clock read separately for each request; defaults to the current Date. */
+    now?: () => Date;
+}
+/**
+ * Creates public /health, /health/live, and /health/ready routes.
+ * @param options - Application label, readiness checks, and optional clock.
+ * @returns A new Hono router; liveness returns 200 and readiness returns 503 only for a not_ready report.
+ * @throws If appName is missing, not a string, or blank. Request handling may reject if the supplied clock throws.
+ * @remarks Check implementations and credentials remain host-owned. These routes install no authentication; mount them where public health status is appropriate. Checks run for every readiness request with no caching by this router.
+ * @example
+ * ```typescript
+ * import { Hono } from "hono";
+ * import { createHealthRouter } from "@alneas/eaos-server/health";
+ * const app = new Hono();
+ * app.route("/", createHealthRouter({ appName: "example-service" }));
+ * const response = await app.request("/health/live");
+ * console.log(response.status); // 200
+ * ```
+ */
+declare function createHealthRouter(options: HealthRouterOptions): Hono;
+
+export { createHealthRouter };
+export type { HealthRouterOptions };

package/dist/health/index.js

@@ -0,0 +1,7 @@
+import {
+  createHealthRouter
+} from "../chunk-R4ADP2DC.js";
+export {
+  createHealthRouter
+};
+//# sourceMappingURL=index.js.map

package/dist/health/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,39 @@
+export { ModuleGuardOptions, createModuleGuard } from './middleware/module-guard.js';
+export { AuthMiddlewareOptions, AuthSessionVerifier, createAuthMiddleware } from './middleware/auth.js';
+export { ErrorHandlerOptions, createErrorHandler } from './middleware/error-handler.js';
+export { CreateAppOptions, EaosConfig, ErpEngine, createErpEngine, defineConfig } from './engine.js';
+export { EntitlementError, EntitlementPrincipalResolver, EntitlementRuntimeOptions, PluginEntitlementRuntime, ProtectedPluginAsset, createPluginAssetRouter, createPluginEntitlementGuard, createSqlTenantEntitlementLoader, requiresEntitlementRuntime, resolveEngineEntitlementPrincipal, tenantEntitlementContract } from './entitlements/index.js';
+export { PluginSdkHost, createSdkPluginRouter } from './plugin-sdk.js';
+export { McpPrincipal, McpRouterOptions, McpRuntime, createMcpRouter } from './mcp.js';
+export { TenantResolver, TenantResolverOptions, createTenantResolver } from './tenant.js';
+export { HealthRouterOptions, createHealthRouter } from './health/index.js';
+export { PlatformAdminRouterOptions, createPlatformAdminRouter } from './platform-admin/index.js';
+export { ServerAgentDispatchMode, ServerAgentExecutionContext, ServerAgentExecutionError, ServerAgentExecutor, ServerAgentTaskRequest, ServerAgentTaskResult, ServerAgentWorkerType, ServerApprovalCallbackPayload } from './agentic/types.js';
+export { ServerAutonomousWorker, ServerRuntimeRole, ServerWorkerOptions } from './agentic/autonomous-worker.js';
+export { CommandAgentExecutorOptions, CommandAgentSandboxMode, CommandAgentSandboxOptions, buildSystemdRunArgs, createCommandAgentExecutor, validateAgentRuntimePolicy } from './agentic/executor.js';
+export { ServerWorkflowAgentRunnerOptions, createWorkflowAgentRunner } from './agentic/agent-runner.js';
+export { WorkflowAgentNodeOptions, createWorkflowAgentNode } from './agentic/agent-node.js';
+export { ServerWorkflowManager, ServerWorkflowOptions } from './agentic/workflow-manager.js';
+export { AgentGraphEngine, AgentGraphEngineOptions, AgentGraphState, GraphApprovalDecision, GraphConditionalEdgeOptions, GraphEdgeOptions, GraphNodeHandler, GraphNodeOptions, GraphRouter, GraphSubgraph, GraphSubgraphOptions } from './agentic/graph.js';
+export { AgentJobClaimFilter, AgentJobDispatchResult, AgentJobDispatcherOptions, AgentJobStore, AtomicAgentJobStoreOptions, DurableAgentJobDispatcher, cancelAgentJob, createAgentJob, createAtomicAgentJobStore, enqueueAgentJob } from './agentic/agent-jobs.js';
+export { LocalRunnerIdentity, LocalRunnerJobKind, LocalRunnerPullCoordinator, LocalRunnerPullCoordinatorOptions } from './agentic/local-runner.js';
+export { AIJobPlan, AIJobSubmission, AIJobTaskInput, DurableAIExecutionBroker, ServerAIExecutionRoute } from './agentic/ai-broker.js';
+export { GraphProjectionCoordinator, GraphProjectionCoordinatorOptions, ProjectionCursorStore } from './agentic/graph-projection.js';
+export { DurableWorkflowCoordinator, DurableWorkflowCoordinatorOptions, StoredWorkflowInstance, WorkflowInstanceStore } from './agentic/workflow-coordinator.js';
+export { EventAgentBridge, EventAgentBridgeError, EventAgentBridgeOptions, EventAgentPendingApproval, EventAgentRule, EventAgentTaskStore, InMemoryEventAgentTaskStore, QueuedEventTask } from './agentic/event-bridge.js';
+export { HttpAgentExecutorOptions, HttpAgentRuntimeRequest, HttpAgentRuntimeResponse, createHttpAgentExecutor } from './agentic/remote-executor.js';
+export { WorkflowNodeCatalog, WorkflowNodeDescriptor, WorkflowNodeRegistration, WorkflowNodeResolverInput } from './agentic/workflow-catalog.js';
+export { CompiledWorkflow, WorkflowCompilerOptions, compileWorkflowDefinition } from './agentic/workflow-compiler.js';
+export { InMemoryWorkflowDefinitionRegistry, WorkflowDefinitionRecord, WorkflowDefinitionRegistry } from './agentic/workflow-registry.js';
+export { WorkspaceContext, WorkspaceContextError, WorkspaceContextStore, WorkspaceIdentity, createWorkspaceContextResolver } from './workspace-context.js';
+export { AtomicCheckpointSaver } from './agentic/atomic-checkpointer.js';
+import 'hono';
+import '@alneas/eaos-core';
+import './lifecycle/index.js';
+import '@alneas/eaos-server/lifecycle-engine';
+import 'hono/types';
+import './plugin-data/index.js';
+import '@alneas/eaos-core/plugin-sdk';
+import '@alneas/eaos-server/platform';
+import './platform-admin/store.js';
+import '@langchain/langgraph';

package/dist/index.js

@@ -0,0 +1,160 @@
+import {
+  createPlatformAdminRouter
+} from "./chunk-753HWDSC.js";
+import "./chunk-YMJ7BRKU.js";
+import "./chunk-7FTJN4SA.js";
+import {
+  InMemoryWorkflowDefinitionRegistry
+} from "./chunk-HVC7FG6B.js";
+import {
+  LocalRunnerPullCoordinator
+} from "./chunk-ZHMTD5KV.js";
+import {
+  createHttpAgentExecutor
+} from "./chunk-IJWYS2PF.js";
+import {
+  WorkflowNodeCatalog
+} from "./chunk-7AHSS7SO.js";
+import {
+  compileWorkflowDefinition
+} from "./chunk-CJ7OFEF7.js";
+import {
+  DurableWorkflowCoordinator
+} from "./chunk-EJKWDZIU.js";
+import {
+  ServerWorkflowManager
+} from "./chunk-FD6VC2NA.js";
+import {
+  createWorkflowAgentRunner
+} from "./chunk-6XZXYNJR.js";
+import {
+  DurableAIExecutionBroker
+} from "./chunk-LYPZPE53.js";
+import {
+  AtomicCheckpointSaver
+} from "./chunk-3NLSWP2Y.js";
+import {
+  ServerAutonomousWorker
+} from "./chunk-THYUY5ZZ.js";
+import {
+  EventAgentBridge,
+  InMemoryEventAgentTaskStore
+} from "./chunk-3P4XTTQH.js";
+import {
+  buildSystemdRunArgs,
+  createCommandAgentExecutor,
+  validateAgentRuntimePolicy
+} from "./chunk-32746UQZ.js";
+import {
+  ServerAgentExecutionError
+} from "./chunk-YABTQZDJ.js";
+import {
+  GraphProjectionCoordinator
+} from "./chunk-W6O3LVBY.js";
+import {
+  AgentGraphEngine
+} from "./chunk-HXFVOR7Z.js";
+import {
+  ErpEngine,
+  createErpEngine,
+  defineConfig
+} from "./chunk-6KV5CJBW.js";
+import {
+  createAuthMiddleware
+} from "./chunk-XIEY2OF4.js";
+import {
+  createErrorHandler
+} from "./chunk-AVDMLTPF.js";
+import {
+  createModuleGuard
+} from "./chunk-VC2PCK2S.js";
+import {
+  createHealthRouter
+} from "./chunk-R4ADP2DC.js";
+import "./chunk-L6PMAEMB.js";
+import {
+  createMcpRouter
+} from "./chunk-VF5YDZJC.js";
+import {
+  createSdkPluginRouter
+} from "./chunk-4VORUFKR.js";
+import {
+  EntitlementError,
+  PluginEntitlementRuntime,
+  createPluginAssetRouter,
+  createPluginEntitlementGuard,
+  createSqlTenantEntitlementLoader,
+  requiresEntitlementRuntime,
+  resolveEngineEntitlementPrincipal,
+  tenantEntitlementContract
+} from "./chunk-46UWPEW2.js";
+import "./chunk-INCHXAFK.js";
+import "./chunk-3VITSHN3.js";
+import {
+  TenantResolver,
+  createTenantResolver
+} from "./chunk-BKAHUEIT.js";
+import {
+  WorkspaceContextError,
+  createWorkspaceContextResolver
+} from "./chunk-WFEAKJLR.js";
+import {
+  DurableAgentJobDispatcher,
+  cancelAgentJob,
+  createAgentJob,
+  createAtomicAgentJobStore,
+  enqueueAgentJob
+} from "./chunk-PBC3MZUL.js";
+import {
+  createWorkflowAgentNode
+} from "./chunk-UGNTCOVR.js";
+export {
+  AgentGraphEngine,
+  AtomicCheckpointSaver,
+  DurableAIExecutionBroker,
+  DurableAgentJobDispatcher,
+  DurableWorkflowCoordinator,
+  EntitlementError,
+  ErpEngine,
+  EventAgentBridge,
+  GraphProjectionCoordinator,
+  InMemoryEventAgentTaskStore,
+  InMemoryWorkflowDefinitionRegistry,
+  LocalRunnerPullCoordinator,
+  PluginEntitlementRuntime,
+  ServerAgentExecutionError,
+  ServerAutonomousWorker,
+  ServerWorkflowManager,
+  TenantResolver,
+  WorkflowNodeCatalog,
+  WorkspaceContextError,
+  buildSystemdRunArgs,
+  cancelAgentJob,
+  compileWorkflowDefinition,
+  createAgentJob,
+  createAtomicAgentJobStore,
+  createAuthMiddleware,
+  createCommandAgentExecutor,
+  createErpEngine,
+  createErrorHandler,
+  createHealthRouter,
+  createHttpAgentExecutor,
+  createMcpRouter,
+  createModuleGuard,
+  createPlatformAdminRouter,
+  createPluginAssetRouter,
+  createPluginEntitlementGuard,
+  createSdkPluginRouter,
+  createSqlTenantEntitlementLoader,
+  createTenantResolver,
+  createWorkflowAgentNode,
+  createWorkflowAgentRunner,
+  createWorkspaceContextResolver,
+  defineConfig,
+  enqueueAgentJob,
+  requiresEntitlementRuntime,
+  resolveEngineEntitlementPrincipal,
+  tenantEntitlementContract,
+  validateAgentRuntimePolicy
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}